File scan report
Verdict Safe
Is start-
A 13-year-old batch file with zero detections and a trusted reference-library entry.
Strong evidence · Widely seen for a long time, and nothing harmful found.
No action required; the file is a known benign batch script associated with the Terraria game.
Good practice2 tips
We found nothing harmful in this file.
Run it only if it came from the developer's own website or an official app store.
Keep your antivirus and Windows updates switched on.
No scanner can promise a file is 100% safe.
Reads the latest antivirus results for this file's hash. Nothing is uploaded.
Antivirus results
0 of 61 flagged
- Flagged 0
- No detection 61
- No result 14
- Code signing Not applicable
- Test run Completed
- First seen 15y ago
Chapter 02
Why we think so
0 points against it and 2 in its favour, checked against the scan evidence.
The reasoning behind this verdict
All 61 antivirus engines that checked it report clean, the file has been submitted thousands of times since 2011, and the National Software Reference Library lists it as Terraria-related. No malicious indicators appear in sandbox or network data.
The complete absence of malicious detections across 75 engines, including 17 major antivirus engines, combined with the NSRL reference hit, establishes this as a known benign file. Its age and high submission count further confirm widespread legitimate use. Sandbox behaviour shows only techniques common in legitimate software with no malicious verdict or network contacts. No signing, brand mismatch, or rule triggers exist to complicate the assessment.
What We Detected
Zero malicious detections from 75 engines; 17 major antivirus engines explicitly marked the file clean. External intelligence shows a match in the National Software Reference Library (NSRL) under the product name "Terraria".
Threat Behavior
The batch file exhibits only routine system-interaction techniques (T1064, T1071, T1082, T1202) with no offensive MITRE techniques, no sandbox malicious verdict, and no contacted domains or files it created.
What To Do Now
The file can be considered safe for normal use. Keep security software enabled as a general precaution.
- NSRL reference-library hit
- widely seen and long established prevalence with 2694 submissions
6 sources checked · 5 complete · 1 not needed or not applicable. See every source
Chapter 03
What it did in our test
It ran in our isolated test environment; no test environment rated what it did as risky.
Test run summary
Capture complete- 4sandbox rule tags
- 3spawned processes
- 0network contacts
- 0filesystem & mutex artifacts
What this file did when executed
This file was run in a sandbox and its runtime behaviour was observed.
Techniques observed in the sandbox
4MITRE ATT&CK techniques the sandbox mapped. Highlighted ones are rare in normal software; the others are common in legitimate programs too.
- T1064
- T1071· Application protocol
- T1082· System recon
- T1202
Observed activity
Processes started
3Programs the file ran, with their command lines.
cmd.exe"C:\Windows\system32\cmd.exe" /c start /wait "" "C:\Users\<USER>\Desktop\_R9W547U.bat"cmd.exeC:\Windows\system32\cmd.exe /K "C:\Users\<USER>\Desktop\_R9W547U.bat"wscript.exeC:\Windows\System32\wscript.exe C:\Windows\System32\WScript.exe "C:\Users\user\Desktop\sample.vbs"
Chapter 04
Technical details
None of the 61 antivirus engines that checked it flag it.
Sources checked
Every check behind this verdict
6 sources checked · 5 complete · 1 not needed or not applicable. Complete means the check returned a usable result; it does not mean the file is safe.
File fingerprint
- Last analyzed
- Sep 6, 2026, 6:48 AM UTC
- SHA-256
131e7ea3f8e4ae359fef01a689ec0c6e113752712cb86624f5705333ac6a41f3- SHA-1
0ac527028375eb760fbcb917a6016857ceffedbc- MD5
3798fb8eb473c4a6311314c6923ff485
About this file
start-server.bat is a DOS batch file file of 123 B.
- Type and size
- DOS batch file · 123 B
- Signer
- Not applicable
- First seen
- Jun 11, 2011On VirusTotal.
- Submitted by
- 2,181 distinct sources
First scanned
Antivirus consensus
0 of 61 engines flagged this file
14 of the 75 engines returned no result for this file (file type not supported, or the scan did not finish), so they did not check it.
- Tier-118 engines0flagged
- Tier-232 engines0flagged
- Low-trust11 engines0flagged
View all 75 engine results
- AcronisClean
- AhnLab-V3Clean
- AlibabaNo result
- alibabacloudClean
- ALYacClean
- Antiy-AVLClean
- APEXNo result
- ArcabitClean
- AvastClean
- Avast-MobileNo result
- AVGClean
- AviraClean
- BitDefenderClean
- BitDefenderFalxNo result
- BkavClean
- CAT-QuickHealClean
- ClamAVClean
- CMCClean
- CrowdStrikeClean
- CTXClean
- CylanceNo result
- CynetClean
- DeepInstinctNo result
- DrWebClean
- ElasticNo result
- EmsisoftClean
- ESET-NOD32Clean
- F-SecureClean
- FortinetClean
- GDataClean
- GoogleClean
- GridinsoftClean
- huorongClean
- IkarusClean
- JiangminClean
- K7AntiVirusClean
- K7GWClean
- KasperskyClean
- KingsoftClean
- LionicClean
- MalwarebytesClean
- MaxSecureClean
- McAfeeDClean
- MicrosoftClean
- MicroWorld-eScanClean
- NANO-AntivirusClean
- PaloaltoNo result
- PandaClean
- RisingClean
- SangforClean
- SentinelOneNo result
- SkyhighClean
- SophosClean
- SUPERAntiSpywareClean
- SymantecClean
- SymantecMobileInsightNo result
- TACHYONClean
- tehtrisNo result
- TencentClean
- TrapmineNo result
- TrellixENSClean
- TrendMicroClean
- TrendMicro-HouseCallClean
- TrustlookNo result
- VaristClean
- VBA32Clean
- VIPREClean
- VirITClean
- ViRobotClean
- WebrootNo result
- XcitiumClean
- YandexClean
- ZillyaClean
- ZoneAlarmClean
- ZonerClean
How widely this file has been seen
Widely seen in the wild for a long time. High prior this is legitimate; isolated detections on common-old files are usually false positives.
Chapter 05
Questions & answers
Short answers to the 6 questions people ask most about this file.
Is start-server.bat safe?
What is start-server.bat?
How many antivirus engines detected start-server.bat?
What is the SHA-256 hash of start-server.bat?
Is it safe to run start-server.bat?
How up to date is this analysis of start-server.bat?
Community
Member reviews and reports for this exact file hash.